Description

Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.

Remediation

References

CVE-2013-4305

Related Vulnerabilities

WordPress Plugin WordPress Survey & Poll-Quiz, Survey and Poll SQL Injection (1.1.91)

WordPress Plugin Complianz-GDPR/CCPA Cookie Consent SQL Injection (6.3.3)

WordPress Plugin Kadence WooCommerce Email Designer PHP Object Injection (1.5.6)

WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk Cross-Site Scripting (5.136.3)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14331)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-4305